$ rpki-client -vvf rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/0B72CFAC049211EBB8144531C4F9AE02.roa File: 0B72CFAC049211EBB8144531C4F9AE02.roa (raw, json) Hash identifier: QCiOK4+KmOrUy5xMwngOwn99titohfwS/g83Zrx37lg= Subject key identifier: D3:D2:62:A9:AB:6F:CE:06:38:19:1C:93:58:09:1E:6F:4D:86:F2:0B Certificate issuer: /CN=A917A47E/serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691 Certificate serial: 24BE Authority key identifier: 02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/0B72CFAC049211EBB8144531C4F9AE02.roa Signing time: Wed 08 Jul 2026 16:20:24 +0000 ROA not before: Wed 08 Jul 2026 16:20:24 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 133466 IP address blocks: 45.112.36.0/22 maxlen: 24 103.4.124.0/22 maxlen: 24 2401:d00::/32 maxlen: 32 2401:d00::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9406 (0x24be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A47E, serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691 Validity Not Before: Jul 8 16:20:24 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a4e78c8-0580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:32:ef:70:48:7b:3d:7f:32:d2:eb:f0:bc:fa: 8a:98:3f:e3:9a:c1:04:73:49:5b:13:42:79:a4:31: ad:c7:42:82:39:7e:cf:7b:e2:f7:78:9f:93:6f:53: 6a:81:65:14:b6:65:2d:43:f6:af:48:f7:7f:f0:bc: 77:fb:e8:94:71:5b:b4:5a:25:bf:dd:27:55:6e:c1: 4c:c3:5b:53:96:5c:0f:1b:7d:99:27:53:03:fa:87: 5b:e6:a0:78:c9:4e:0f:4f:e7:54:ce:38:2d:8d:1e: 27:07:96:52:17:a5:3a:5e:c5:f3:25:0e:b4:17:05: 44:24:26:67:86:10:b3:17:f3:19:d0:44:12:54:63: 6e:49:4b:40:37:d2:11:d4:be:b0:b9:94:dc:8e:1c: b2:12:56:e9:78:ad:cf:17:bf:34:78:58:d2:a4:f1: 94:5a:a9:b0:35:eb:f1:19:52:91:22:47:c3:c9:a3: 89:78:9d:30:d1:8f:9c:d0:dd:d7:4f:4d:26:35:00: 5e:ab:3a:ce:80:60:31:b7:d4:08:4c:82:43:04:c7: 27:fc:9d:18:98:01:91:ee:90:2a:9f:52:38:f7:fa: 59:72:4f:8c:75:91:e7:e3:91:b2:77:84:3d:ec:11: 4e:4b:73:b1:67:8e:e3:50:11:d0:c9:2b:ec:b1:62: 5a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D2:62:A9:AB:6F:CE:06:38:19:1C:93:58:09:1E:6F:4D:86:F2:0B X509v3 Authority Key Identifier: keyid:02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/0B72CFAC049211EBB8144531C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.112.36.0/22 103.4.124.0/22 IPv6: 2401:d00::/32 Signature Algorithm: sha256WithRSAEncryption 8b:cc:7f:7f:30:f7:47:43:72:fb:21:1a:a9:33:d1:b4:e6:6a: 94:30:3e:77:58:7b:b9:28:7c:ba:3f:d4:05:17:ed:54:41:2b: 74:8a:61:74:3e:31:93:42:cf:3b:68:c1:ea:fd:a8:38:56:bf: e1:52:29:4b:36:a9:d6:3c:f3:2a:63:a4:d8:97:dc:40:37:8a: 6b:30:d7:79:9d:4e:31:e7:c6:fe:94:0f:07:9b:f1:9b:88:1e: 4f:cc:b8:e8:c6:bc:89:60:09:2b:12:e6:f4:a4:36:fd:48:5f: 82:13:7f:fa:a9:aa:c9:d0:96:25:8d:29:fa:b8:9c:29:40:79: b1:d7:57:8f:d8:c7:1a:dc:56:df:63:06:af:09:ee:4a:cd:3d: 6d:7c:48:69:17:64:03:17:1e:fe:d7:3a:32:04:d3:77:14:16: e4:c3:e4:40:43:a3:9f:31:36:65:42:a3:3f:e2:32:64:23:d4: 2c:bc:cd:29:ce:2a:74:c7:09:4d:2b:67:48:bb:69:73:a3:94: 83:26:ed:38:48:ad:21:ab:a9:6b:2b:fd:29:ed:21:f7:66:67: 45:f2:f6:20:71:68:47:d8:75:75:27:0a:64:1a:79:b0:a7:64: d4:21:63:5a:8d:d9:c1:9c:5f:b3:99:2e:44:ad:a9:80:47:d5: 01:56:1f:28 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICJL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0N0UxMTAvBgNVBAUTKDAyRTk3Q0FGNkJCNTU0ODcxQjdBQkNFNkU4RDc4MzIw RUI5NDQ2OTEwHhcNMjYwNzA4MTYyMDI0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRlNzhjOC0wNTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozLvcEh7PX8y0uvwvPqKmD/jmsEEc0lbE0J5pDGtx0KCOX7Pe+L3eJ+Tb1Nq gWUUtmUtQ/avSPd/8Lx3++iUcVu0WiW/3SdVbsFMw1tTllwPG32ZJ1MD+odb5qB4 yU4PT+dUzjgtjR4nB5ZSF6U6XsXzJQ60FwVEJCZnhhCzF/MZ0EQSVGNuSUtAN9IR 1L6wuZTcjhyyElbpeK3PF780eFjSpPGUWqmwNevxGVKRIkfDyaOJeJ0w0Y+c0N3X T00mNQBeqzrOgGAxt9QITIJDBMcn/J0YmAGR7pAqn1I49/pZck+MdZHn45Gyd4Q9 7BFOS3OxZ47jUBHQySvssWJauQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFNPSYqmr b84GOBkck1gJHm9NhvILMB8GA1UdIwQYMBaAFALpfK9rtVSHG3q85ujXgyDrlEaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ3RS8zRTZCRUM1NjY5 MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJY2JlcnptNk5lRElPdVVS cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F1bDhyMnUxVkljYmVyem02TmVESU91VVJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E0N0UvM0U2QkVDNTY2OTA5MTFFNTgwNEYwMDcyQzRGOUFFMDIvMEI3MkNGQUMw NDkyMTFFQkI4MTQ0NTMxQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLXAkAwQCZwR8MA0EAgACMAcDBQAkAQ0AMA0GCSqGSIb3DQEBCwUA A4IBAQCLzH9/MPdHQ3L7IRqpM9G05mqUMD53WHu5KHy6P9QFF+1UQSt0imF0PjGT Qs87aMHq/ag4Vr/hUilLNqnWPPMqY6TYl9xAN4prMNd5nU4x58b+lA8Hm/GbiB5P zLjoxryJYAkrEub0pDb9SF+CE3/6qarJ0JYljSn6uJwpQHmx11eP2Mca3FbfYwav Ce5KzT1tfEhpF2QDFx7+1zoyBNN3FBbkw+RAQ6OfMTZlQqM/4jJkI9QsvM0pzip0 xwlNK2dIu2lzo5SDJu04SK0hq6lrK/0p7SH3ZmdF8vYgcWhH2HV1JwpkGnmwp2TU IWNajdnBnF+zmS5EramAR9UBVh8o -----END CERTIFICATE-----Generated at Fri Jul 24 10:55:00 2026 by rpki-client